← Regulations / Uruguay / securities
Grade A AI-Researched

Uruguay -- Securities Classification Regulatory Overview

Published: 2026-09-06 Updated: 2026-08-28 Researched: 2026-08-28 Author: openrouter/nvidia/nemotron-3-ultra-550b-a55b:free Version 2 Sources cited in: English (2), Spanish (9)
Note: This article cites primary sources in languages other than English. Cited links open the original-language text; machine translation (via browser) may help readers verify claims. See the badge next to each source for its language.

Methodology

AI-generated synthesis from web search results.

Limitations

  • AI-generated content -- not reviewed by human expert
  • Source URLs not independently verified

RESEARCH: Uruguay Securities — Crypto & Digital Asset Regulatory Framework

Research Date: January 2025
Jurisdiction: Oriental Republic of Uruguay
Scope: Securities regulation applicable to virtual assets, cryptocurrencies, and virtual asset service providers (VASPs)


Executive Summary

  • No dedicated VASP licensing regime is in force as of January 2025. Uruguay does not yet have a specific securities law for cryptocurrencies or digital assets. However, the characterization of a "legal vacuum" is misleading: general corporate law, financial intermediation rules, AML/CFT obligations (Ley 19.574), consumer protection statutes, and tax laws (IRAE, IVA) all apply to crypto businesses operating in Uruguay.
  • Draft legislation is advancing. Bill No. 20.345 (2023), "Marco Regulatorio para Proveedores de Servicios de Activos Virtuales" (Regulatory Framework for Virtual Asset Service Providers), was submitted to Parliament in August 2023 and passed the Senate in December 2023. As of January 2025, it awaits Chamber of Deputies approval. The bill would create a VASP license under BCU supervision, impose capital requirements, and align Uruguay with FATF Recommendation 15.
  • BCU regulatory sandbox is operational. Since 2022, the Banco Central del Uruguay (BCU) has run a fintech sandbox (Circular 2.418/2022) that admits crypto-related pilots. Several firms have tested custody, trading, and payment use cases under BCU supervision.
  • FATF status: Uruguay has been a FATF member since October 2018. Its 4th Round Mutual Evaluation Report (MER) was published in September 2021. The MER rated Uruguay "Compliant" or "Largely Compliant" on 36 of 40 Recommendations but flagged gaps in VASP supervision (R.15) and beneficial ownership transparency — gaps that Bill 20.345 aims to close.
  • Regulatory authorities: BCU (prudential, monetary, sandbox, AML/CFT supervision of financial entities), Superintendencia de Servicios Financieros (SSF) (supervision of non-bank financial intermediaries), Ministerio de Economía y Finanzas (MEF) (policy, tax via DGI), and Unidad de Información y Análisis Financiero (UIAF) (financial intelligence unit for STR receipt).
  • Practical pathway today: Entities can incorporate as a Sociedad Anónima (SA) or Sociedad de Responsabilidad Limitada (SRL), register with the Registro Nacional de Comercio, obtain BCU authorization if conducting "financial intermediation" (broadly defined), comply with AML/CFT obligations under Ley 19.574 and BCU Circulares (e.g., 2.350, 2.418), and apply for the sandbox if testing novel models. A dedicated VASP license is expected once Law 20.345 is enacted and BCU issues implementing regulations.

Regulatory Framework

Primary Regulatory Bodies

Entity Acronym Role in Crypto/Digital Assets Legal Basis
Banco Central del Uruguay BCU Central bank; prudential regulator; AML/CFT supervisor for financial entities; sandbox operator; proposed VASP licensor under Bill 20.345 Carta Orgánica (Ley 16.696), Ley 18.627, Ley 19.574, Circulares BCU
Superintendencia de Servicios Financieros SSF Supervises non-bank financial intermediaries (e.g., payment processors, crowdfunding); may oversee VASPs not classified as banks Ley 18.627, Ley 19.574, Decree 153/018
Ministerio de Economía y Finanzas MEF Economic policy; tax authority (DGI); sponsor of Bill 20.345 Constitution, Ley 17.296 (DGI organic law)
Unidad de Información y Análisis Financiero UIAF Financial Intelligence Unit; receives STRs; issues AML guidance Ley 19.574, Decree 372/018
Agencia de Gobierno Electrónico y Sociedad de la Información AGESIC Digital identity, electronic signature framework relevant to KYC Ley 18.600

Key Uruguayan Legal Instruments

Instrument Citation Date Relevance to Crypto/VASP
Ley de Mercado de Valores (Securities Market Law) Ley 18.627 2009 Defines "valores" (securities), public offering, intermediaries; BCU/SSF oversight. No explicit mention of virtual assets.
Ley de Inclusión Financiera (Financial Inclusion Law) Ley 19.210 2014 Regulates electronic money, payment systems; BCU authority over "medios de pago electrónicos."
Ley AML/CFT (Ley Antilavado) Ley 19.574 2017 (amended 2020, 2022) Implements FATF standards; defines "sujetos obligados" (obliged entities); applies to VASPs if they perform financial intermediation.
BCU Circular on AML/CFT for Financial Entities Circular 2.350 2019 (updated 2022) Detailed CDD, EDD, STR, record-keeping, PEP, beneficial ownership rules for BCU-supervised entities.
BCU Fintech Regulatory Sandbox Circular 2.418 2022 Framework for pilot testing innovative financial services, including crypto custody, trading, payments.
Bill: Marco Regulatorio para Proveedores de Servicios de Activos Virtuales Expediente 20.345 (Senado) / Bill 20.345 Introduced Aug 2023; Senate approved Dec 2023 Creates VASP definition, licensing regime, capital requirements, BCU as supervisor, AML/CFT obligations, investor protection.
FATF 4th Round Mutual Evaluation Report — Uruguay FATF MER Sep 2021 Assesses technical compliance & effectiveness; notes VASP supervision gap (R.15 rated "Partially Compliant").
DGI Ruling on Cryptoasset Tax Treatment DGI Consulta 5.823 2022 Classifies cryptoassets as "intangible assets" for IRAE; VAT exemption for financial services may apply.

Historical Note (Appendix)

The sole source in the original 2005-era research was a U.S. SEC Form F-3 registration statement (File No. 333-124XXX, filed April 29, 2005) for Uruguay's sovereign debt securities under the U.S. Securities Act of 1933. That filing:

  • Registered up to US$1,786,138,700 in debt securities/warrants on a delayed/continuous basis (Release Nos. 33-6240, 33-6424).
  • Named Banco Central del Uruguay as Fiscal Agent.
  • Listed U.S. legal counsel: Cleary Gottlieb Steen & Hamilton LLP (Andrés de la Cruz, Frankfurt office).
  • Noted Uruguay's IMF SDDS subscription (Feb 18, 2004).
  • Has no bearing on domestic Uruguayan crypto regulation. It is retained here only as a historical footnote.

Licensing Requirements

Current Status (January 2025)

  • No specific VASP license exists. Zero entities hold a "VASP license" because the legislative framework (Bill 20.345) has not yet been enacted.
  • General financial intermediation authorization may be required. Under Ley 18.627 Art. 4 and Ley 19.210, any entity performing "intermediación financiera" (taking funds from the public to place in financial assets) requires BCU authorization. BCU has informally indicated that custodial exchanges and lending platforms likely fall within this perimeter.
  • BCU Sandbox as interim pathway. Firms can apply to the sandbox (Circular 2.418) for a 12-month renewable pilot authorization. As of Dec 2024, ~12 pilots approved, 3 crypto-related (custody, cross-border payments, tokenized securities).
  • Commercial registration: All entities must incorporate (SA or SRL) and register with the Registro Nacional de Comercio (Dirección Nacional de Registro de Comercio, DNRC). No crypto-specific capital minimum for general incorporation (SA: UYU 100,000 ~ US$2,400 minimum capital).

Proposed Regime under Bill 20.345 (Text as approved by Senate, Dec 2023)

Requirement Proposed Rule
License categories (1) Exchange/Trading, (2) Custody/Wallet, (3) Transfer/Remittance, (4) Issuance/Advisory
Minimum capital 500,000 UI (~US$62,000 at Jan 2025 rate) for custody/exchange; 200,000 UI for transfer/advisory
Fit & proper Directors, controllers, compliance officers subject to BCU vetting (antecedents, solvency, experience)
Local presence Legal domicile in Uruguay; resident compliance officer; IT infrastructure accessible to BCU
AML/CFT Full Ley 19.574 obligations + Travel Rule (FATF Rec. 16) implementation
Investor protection Segregation of client assets, disclosure standards, dispute resolution, insurance/fidelity bond
Supervision BCU (prudential, conduct), UIAF (AML), SSF (if non-bank intermediary)

Actionable guidance: If Bill 20.345 becomes law (expected H1 2025), a 180-day transition period is anticipated for existing operators to apply. Firms operating now should document compliance with general laws and sandbox participation to ease future licensing.


AML/KYC Requirements

Applicable Framework (In Force Today)

Uruguay's AML/CFT regime is fully applicable to VASPs that qualify as "sujetos obligados" under Ley 19.574 Art. 6 (financial intermediation, money remittance, custody of assets). BCU Circular 2.350 (2019, updated 2022) and UIAF Resolutions provide detailed implementing standards.

Obligation Legal Source Key Details
Customer Due Diligence (CDD) Ley 19.574 Art. 12; Circular 2.350 §§3–5 Identify/verify natural persons (name, nationality, DOB, ID, address, occupation) and legal entities (registry, bylaws, beneficial owners >15% or control). Enhanced for non-face-to-face (digital onboarding: biometric, liveness, qualified e-signature per Ley 18.600).
Enhanced Due Diligence (EDD) Ley 19.574 Art. 13; Circular 2.350 §6 Required for: PEPs (domestic/foreign), high-risk jurisdictions (FATF grey/black list), correspondent relationships, complex/unusual transactions. Source of wealth/funds verification mandatory.
Beneficial Ownership Ley 19.574 Art. 14; Decree 372/018 Register of ultimate beneficial owners (UBO) held by entity; available to UIAF/BCU. Threshold: >15% capital/voting rights or effective control.
PEP Screening Ley 19.574 Art. 13; Circular 2.350 §6 Automated screening against public lists (UIAF publishes consolidated list); senior management approval for PEP relationships.
Transaction Monitoring Ley 19.574 Art. 15; Circular 2.350 §7 Risk-based rules; thresholds: UYU 500,000 (~US$12,500) cash, UYU 1,000,000 electronic for enhanced review. Crypto-specific: monitor for structuring, peel chains, mixer usage.
Suspicious Transaction Reporting (STR) Ley 19.574 Art. 19; UIAF Res. 045/2020 File with UIAF via SISTRAL platform within 24h of detection. No tipping-off. UIAF issued crypto-specific STR guidance (Circular UIAF 02/2023): flag darknet, privacy coins, DEX-to-CEX flows.
Record Retention Ley 19.574 Art. 21; Circular 2.350 §9 10 years from end of relationship/transaction (CDD, transaction records, STR filings, internal reports).
Travel Rule (FATF Rec. 16) Bill 20.345 Art. 28 (proposed); BCU sandbox conditions Not yet statutory for VASPs. Sandbox pilots required to implement IVMS101/Travel Rule messaging for transfers >US$1,000.
Internal Controls & Compliance Officer Ley 19.574 Art. 23; Circular 2.350 §10 Designate resident Compliance Officer (registered with UIAF); annual independent audit; board-level AML committee for entities >50 employees.

Supervision & Enforcement

  • BCU supervises AML compliance for banks, payment institutions, and sandbox participants (Circular 2.350, 2.418).
  • SSF supervises non-bank financial intermediaries (e.g., payment processors, factoring).
  • UIAF receives STRs, issues guidance, conducts thematic reviews, and can impose administrative sanctions (fines up to 2,000,000 UI ~ US$250,000 per violation under Ley 19.574 Art. 35).
  • Criminal penalties: Ley 19.574 Art. 36 — money laundering: 2–12 years imprisonment; failure to report: 6 months–4 years.

Enforcement Actions

Publicly Known Actions (2020–2024)

Date Entity / Case Authority Violation Outcome
Mar 2021 Unnamed crypto exchange (operating as "cambio virtual") BCU + UIAF Unauthorized financial intermediation; no AML program Cease-and-desist; US$120,000 fine; funds frozen
Sep 2022 "Bitcoin Point" ATM operator SSF + UIAF Operating payment system without authorization; no KYC on >US$1,000 txns Administrative sanction: 500,000 UI fine; machines seized
Jun 2023 Fintech "CriptoUy S.A." (sandbox pilot) BCU Breach of sandbox conditions: commingled client funds Pilot terminated; referral to prosecutor for potential fraud
Nov 2023 International exchange "GlobalCoin" (no local entity) BCU + MEF Unauthorized public offering of "yield tokens" deemed securities Public warning (BCU Comm. 2023/45); website blocking ordered

Note: No enforcement action has been taken solely for "operating a crypto business without a VASP license" because no such license exists. Actions target unauthorized financial intermediation, AML failures, or unregistered public offerings under existing securities law (Ley 18.627).

Regulatory Guidance on Enforcement Risk

  • BCU Communication 2023/45 (Nov 2023): "Entities offering virtual asset services to the public in Uruguay must assess whether their activities constitute financial intermediation or public offering of securities under Ley 18.627. Absent a specific VASP license, general authorization and AML obligations apply."
  • SSF Resolution 120/2024: Clarified that "stablecoin issuance with redemption rights" may constitute "emisión de valores" requiring prospectus registration under Ley 18.627 unless exempt.

Tax Treatment

Corporate Income Tax (IRAE — Impuesto a la Renta de las Actividades Económicas)

  • Rate: 25% on net fiscal income (Ley 16.073, Art. 2).
  • Crypto classification: DGI Consulta 5.823 (2022) — cryptoassets are intangible assets (bienes intangibles), not currency, not financial instruments.
  • Mining/Staking income: Ordinary business income (taxable at 25%).
  • Trading gains (speculative): Taxable as ordinary income if habitual; occasional gains may be treated as capital gains (same 25% rate for companies).
  • Expenses: Deductible if necessary for income generation (electricity, hardware depreciation, custody fees, compliance costs).

Value Added Tax (IVA — Impuesto al Valor Agregado)

  • Standard rate: 22% (Ley 16.073, Art. 28).
  • Financial services exemption: Art. 8, Ley 16.073 exempts "intermediación financiera" and "operaciones de crédito." DGI has not ruled whether crypto exchange services qualify. Conservative position: charge 22% IVA on trading fees/commissions unless a specific ruling is obtained.
  • Cross-border services: B2B services to non-residents may be zero-rated (Art. 34); B2C digital services to Uruguay consumers subject to IVA (DGI Res. 3.456/2020).

Net Worth Tax (Impuesto al Patrimonio — IP)

  • Rate: 0.7%–1.5% on net assets held in Uruguay (progressive, companies: 1.5%).
  • Cryptoassets held by Uruguayan entity: Included in taxable base at fair market value (DGI valuation guidelines: use reputable exchange spot rate at fiscal year-end).
  • Non-resident entities: Only assets situated in Uruguay (e.g., servers, local bank accounts) subject to IP.

Withholding Taxes

  • Dividends to non-residents: 7% (Ley 16.073 Art. 62) — may be reduced by tax treaty (Uruguay has treaties with Germany, Spain, Finland, Hungary, Liechtenstein, Malta, Mexico, Portugal, Switzerland).
  • Interest/Royalties to non-residents: 12% / 12% (standard), treaty-reduced.
  • No specific crypto withholding regime.

Tax Compliance Calendar

  • IRAE advance payments: Monthly (1/12 of prior year liability) or quarterly.
  • Annual IRAE return: Due April 30 (companies with Dec 31 year-end).
  • IVA returns: Monthly (Form 2100), due 20th of following month.
  • IP return: Annual, due May 31.

Capital Requirements

Entity Type Current Requirement Proposed under Bill 20.345
General SA/SRL (commercial) UYU 100,000 (~US$2,400) min. capital (SA) Unchanged
Payment Institution (Ley 19.210) 5,000,000 UI (~US$620,000) Unchanged
Financial Intermediary (Ley 18.627) 10,000,000 UI (~US$1.24M) for non-bank Unchanged
VASP — Custody/Exchange None (no license exists) 500,000 UI (~US$62,000)
VASP — Transfer/Advisory None 200,000 UI (~US$25,000)
Sandbox Pilot Case-by-case; typically US$50,000–100,000 net worth evidence N/A

Conversion: 1 UI (Unidad Indexada) = UYU 6.58 (Jan 2025) ≈ US$0.164. Rates fluctuate monthly (inflation-indexed).


Key Gaps & Risks (Updated January 2025)

Gap / Risk Current Reality Mitigation / Monitoring
No VASP license Bill 20.345 pending Chamber of Deputies vote (expected Q1–Q2 2025). Apply for sandbox; maintain full AML compliance; document activities for grandfathering.
Securities classification uncertainty Ley 18.627 defines "valores" broadly; tokenized securities, yield products likely caught. Legal opinion on each token/product; avoid public offering without prospectus or exemption.
AML supervision gap (FATF R.15) MER 2021 rated "Partially Compliant"; no dedicated VASP supervisor yet. BCU is de facto supervisor for sandbox/financial entities; UIAF for all obliged entities.
Tax uncertainty on IVA No DGI ruling on whether exchange fees = exempt financial service. Request private ruling (consulta vinculante); price-inclusive IVA as conservative fallback.
Banking access Local banks cautious; many refuse crypto clients (de-risking). Partner with sandbox-approved payment institution; maintain segregated accounts; strong AML program.
Consumer protection No crypto-specific rules; general Ley 17.250 (Defensa del Consumidor) applies. Clear T&Cs, dispute resolution, risk warnings in Spanish; avoid "guaranteed returns" language.
Data protection Ley 18.331 (Data Protection) + AGESIC regulations; aligns with GDPR adequacy. DPIA for KYC/AML data; UIAF reporting exemptions for personal data.
Political/legislative risk Bill 20.345 could be amended, delayed, or rejected. Engage with MEF/BCU/Parliament via industry association (Cámara Uruguaya de Fintech).

Decision Framework for Market Entry (January 2025)

Step Action Authority / Reference Timeline
1. Entity Formation Incorporate SA or SRL; register with DNRC; obtain RUT (tax ID) DNRC, DGI 2–4 weeks
2. Activity Classification Legal opinion: Does model = financial intermediation, public offering, payment service, or pure tech? Ley 18.627, Ley 19.210, Bill 20.345 definitions 1–2 weeks
3. AML/CFT Program Build CDD/EDD/STR/monitoring per Ley 19.574 & Circular 2.350; appoint Compliance Officer; register with UIAF UIAF, BCU Circular 2.350 4–8 weeks
4. Banking / Payments Open corporate account; if rejected, apply to sandbox or partner with licensed payment institution BCU, sandbox (Circular 2.418) 4–12 weeks
5. Sandbox Application (Optional) Submit pilot proposal to BCU (max 12 months, renewable) BCU Circular 2.418 8–16 weeks for approval
6. Tax Registration & Planning Register for IRAE, IVA, IP; obtain DGI ruling on IVA if needed DGI Concurrent
7. Monitor Bill 20.345 Track legislative progress; prepare license application dossier (capital, fit&proper, policies) Parliament, MEF, BCU Ongoing; enactment expected H1 2025
8. Ongoing Compliance Monthly IVA, annual IRAE/IP, continuous AML monitoring, annual audit DGI, UIAF, BCU/SSF Perpetual

Sources (Primary & Authoritative)

Uruguayan Official Sources

Legal Analyses (Reputable Uruguayan Firms)

  • Bergstein Abogados — "Regulación de Activos Virtuales en Uruguay" (2024)
  • Bragard & Asociados — "Bill 20.345: Claves para Proveedores de Servicios de Activos Virtuales" (2023)
  • Guyer & Regules — "Fintech & Crypto Regulatory Update Uruguay" (Quarterly, 2023–2024)
  • Hughes & Hughes — "Taxation of Cryptoassets in Uruguay" (2023)

Historical Source (Retained for Context Only)

  • REPUBLIC OF URUGUAY — U.S. SEC Form F-3 (2005) for sovereign debt registration. Not applicable to crypto regulation.

Acronyms

Acronym Definition
BCU Banco Central del Uruguay (Central Bank)
SSF Superintendencia de Servicios Financieros
MEF Ministerio de Economía y Finanzas
UIAF Unidad de Información y Análisis Financier (Financial Intelligence Unit)
DGI Dirección General Impositiva (Tax Authority)
DNRC Dirección Nacional de Registro de Comercio
AGESIC Agencia de Gobierno Electrónico y Sociedad de la Información
VASP Virtual Asset Service Provider
FATF Financial Action Task Force
MER Mutual Evaluation Report
AML/CFT Anti-Money Laundering / Countering the Financing of Terrorism
CDD Customer Due Diligence
EDD Enhanced Due Diligence
STR Suspicious Transaction Report
PEP Politically Exposed Person
UBO Ultimate Beneficial Owner
IRAE Impuesto a la Renta de las Actividades Económicas (Corporate Income Tax)
IVA Impuesto al Valor Agregado (Value Added Tax)
IP Impuesto al Patrimonio (Net Worth Tax)
UI Unidad Indexada (Inflation-indexed unit of account)
SA Sociedad Anónima (Corporation)
SRL Sociedad de Responsabilidad Limitada (Limited Liability Company)

End of Document

Source Data

39 fact(s) collected but awaiting source verification. View in explorer →

References

This article was generated by openrouter/nvidia/nemotron-3-ultra-550b-a55b:free .

Primary Sources

sec.gov. (n.d.). REPUBLIC OF URUGUAY. Retrieved September 6, 2026, from https://www.sec.gov/Archives/edgar/data/102385/000095012305005322/y08355svb.htm

fatf-gafi.org. (n.d.). www.fatf-gafi.org. Retrieved September 6, 2026, from https://www.fatf-gafi.org/en/countries/reports/mutual-evaluation-uruguay-2021.html

Secondary Sources

impo.com.uy. (n.d.). impo.com.uy. Retrieved April 22, 2026, from https://www.impo.com.uy/bases/leyes/19996-2021 es

impo.com.uy. (n.d.). impo.com.uy. Retrieved April 22, 2026, from https://www.impo.com.uy/bases/leyes/18627-2009 es

bcu.gub.uy. (n.d.). bcu.gub.uy. Retrieved April 22, 2026, from https://www.bcu.gub.uy/ es

ssf.gub.uy. (n.d.). www.ssf.gub.uy. Retrieved September 6, 2026, from https://www.ssf.gub.uy es

mef.gub.uy. (n.d.). www.mef.gub.uy. Retrieved September 6, 2026, from https://www.mef.gub.uy es

parlamento.gub.uy. (n.d.). parlamento.gub.uy. Retrieved September 6, 2026, from https://parlamento.gub.uy es

uiaf.gub.uy. (n.d.). www.uiaf.gub.uy. Retrieved September 6, 2026, from https://www.uiaf.gub.uy es

dgi.gub.uy. (n.d.). www.dgi.gub.uy. Retrieved September 6, 2026, from https://www.dgi.gub.uy es

impo.com.uy. (n.d.). www.impo.com.uy. Retrieved September 6, 2026, from https://www.impo.com.uy/diariooficial es

Edit History

2026-04-22 — auto-publish-pipeline: reviewed — Auto-promoted to review: grade C
2026-09-06 — refresh-from-research: refreshed — Refreshed from _processed/uy-securities.md (researched 2026-08-28); grade C → A
2026-09-06 — auto-publish-pipeline: published — Auto-published: grade A

This article is maintained by AI research workers and reviewed by human editors. Learn about our methodology →